]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension
authorWilliam Lallemand <wlallemand@haproxy.org>
Tue, 20 Oct 2020 15:36:46 +0000 (17:36 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Tue, 20 Oct 2020 16:25:46 +0000 (18:25 +0200)
commit8e8581e242f94625340028b9006bb62a3cbfd898
treebe833ce4bc6fe8b33173f355e79ca4ab3070ed29
parent835712ad909fe1b36ee53f521d17bbc0a5df3794
MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension

In issue #785, users are reporting that it's not convenient to load a
".crt.key" when the configuration contains a ".crt".

This option allows to remove the extension of the certificate before
trying to load any extra SSL file (.key, .ocsp, .sctl, .issuer etc.)

The patch changes a little bit the way ssl_sock_load_files_into_ckch()
looks for the file.
doc/configuration.txt
include/haproxy/ssl_sock-t.h
src/cfgparse-ssl.c
src/ssl_ckch.c
src/ssl_sock.c